Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/Ia8E38QiBhb3ZbIdoWNWWs1j8EU.roa
File: Ia8E38QiBhb3ZbIdoWNWWs1j8EU.roa (raw, json)
Hash identifier: TSpO4Sa/UQERunokRLpQ2Te973z/R6VmHy0agtMMJaI=
Subject key identifier: 21:AF:04:DF:C4:22:06:16:F7:65:B2:1D:A1:63:56:5A:CD:63:F0:45
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 0188E20AC2E57EAD71312BD270AD854CA889
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/Ia8E38QiBhb3ZbIdoWNWWs1j8EU.roa
Signing time: Thu 22 Jun 2023 07:38:56 +0000
ROA not before: Thu 22 Jun 2023 07:38:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 85.153.67.0/24 maxlen: 24
85.153.66.0/24 maxlen: 24
85.153.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Aug 2023 21:06:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e2:0a:c2:e5:7e:ad:71:31:2b:d2:70:ad:85:4c:a8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Jun 22 07:38:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21af04dfc4220616f765b21da163565acd63f045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:82:15:ab:28:42:4c:bf:41:b7:ce:10:a8:b8:
73:0b:92:ce:a5:ba:59:a5:f7:79:54:82:4d:e6:c4:
39:b6:7d:a9:97:87:86:53:b7:43:b4:27:ff:3c:68:
b4:ac:40:c5:4a:5d:8f:98:e0:fc:44:90:a2:9d:fa:
c1:90:5c:78:1e:46:5c:68:03:4f:72:24:0d:ec:7d:
d7:44:30:4d:d3:b3:7f:48:58:5e:05:64:1c:5c:fd:
6d:05:97:29:50:d1:4a:8c:cd:cf:a4:83:14:45:8b:
29:ba:8c:59:7e:5f:42:3f:0e:8c:23:36:b7:af:df:
78:fc:4e:d3:3a:87:34:f2:05:90:51:64:cb:7b:8b:
5a:f2:c7:25:3e:3c:50:a5:4d:ec:33:1e:1d:51:13:
cd:07:bf:df:e1:03:44:79:0e:69:b8:d5:42:93:44:
04:27:c3:a0:4a:8a:21:70:e5:91:0b:23:eb:2c:7a:
fd:45:c3:a2:ca:83:4f:e2:3c:10:4c:d4:70:fb:81:
fa:0d:83:d4:e3:55:a0:92:39:be:31:33:52:24:c8:
d1:b0:b1:bf:70:0b:b1:6c:65:3b:4c:98:be:53:e0:
af:87:3e:cf:b0:c0:3a:ee:d5:ed:2c:c5:c3:2e:59:
b2:86:6d:bb:5c:2d:e4:b9:29:f6:02:22:e8:6b:23:
f7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AF:04:DF:C4:22:06:16:F7:65:B2:1D:A1:63:56:5A:CD:63:F0:45
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/Ia8E38QiBhb3ZbIdoWNWWs1j8EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.65.0-85.153.67.255
Signature Algorithm: sha256WithRSAEncryption
56:9c:60:2b:6d:3c:d2:7a:76:a9:44:34:5e:3c:41:d8:d1:9f:
a8:db:31:fa:51:8c:96:6f:1a:13:38:9f:53:63:a2:82:bf:61:
ae:38:fe:1f:61:b9:7a:9e:5c:26:6d:6c:7d:91:fb:e5:8c:b6:
29:db:46:af:24:61:d1:ae:2c:b3:2f:65:ed:3f:94:24:64:f5:
ee:e2:4e:6d:49:a5:56:f0:67:48:ab:64:06:c1:0a:1f:4f:24:
6e:6c:7a:22:59:9d:ec:97:e9:db:10:5b:ba:0b:37:00:2d:79:
2e:70:5f:30:51:ec:19:e8:01:1f:94:45:a2:06:7f:a9:14:36:
c6:8e:d9:1f:cc:26:7e:72:55:88:d1:02:41:b4:8f:0e:a7:77:
63:7e:34:94:87:38:60:bc:b7:9b:4a:23:dc:67:fe:a0:a6:47:
cc:6d:79:cf:9b:22:be:71:ff:0b:78:5e:61:14:32:e5:7f:5a:
2b:59:21:03:67:41:4a:a2:74:d6:1b:e2:89:df:a4:b3:a4:16:
32:c0:ba:34:cc:e2:10:5c:b2:6e:5f:d1:de:9c:05:c3:3b:c5:
42:24:ed:d3:b3:d6:87:f0:c3:fa:f8:a7:c7:2d:0a:e3:0e:14:
94:3f:d5:41:ce:4c:ba:a2:0a:18:a5:af:16:5f:7a:62:35:13:
c1:ac:dc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-fra.rpki-client.org